Behavioral task
behavioral1
Sample
6fddb1088ffdcbf94db64e037dd8b1c1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fddb1088ffdcbf94db64e037dd8b1c1.exe
Resource
win10v2004-20231215-en
General
-
Target
6fddb1088ffdcbf94db64e037dd8b1c1
-
Size
84KB
-
MD5
6fddb1088ffdcbf94db64e037dd8b1c1
-
SHA1
076a2d7f2d4a17246b8349ccb1186f7900a3b8be
-
SHA256
0759aaa65ec336d19e0cad3185a4b89048f04199e056439261316f279f43e016
-
SHA512
ec9f168ecf321e1ed803c2fe6545e0c1f5fac574d6d550cb0c2a459c33ba62edad8a5433caa471de09d9d220390bcfabcdd40d24b53937d7e14859d6fd03a622
-
SSDEEP
1536:E9DHT7vkjhcD5gZNwSDub2ipcatkVSYsFpNwv2Ljanouy8y08:4DfwNwSU6HsFpNwvMjCoutQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fddb1088ffdcbf94db64e037dd8b1c1
Files
-
6fddb1088ffdcbf94db64e037dd8b1c1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE